2026 Tradeify — forum leak claim (unverified); 240K+ Klaviyo CRM profiles alleged
Data compromised
Actor-claimed 240,174 customer profiles including names, emails, phone numbers, physical addresses (city/state/zip/country), limited purchase history, and Klaviyo CRM metadata—poster alleged API key remained active
Technical writeup
Unverified forum claim — indexed June 5, 2026. Threat-intelligence reporting (Dark Web Informer) documented actor macaroni advertising a free leak of alleged Tradeify customer CRM data described as 240,174 profiles exfiltrated through an exposed Klaviyo API credential. Claimed fields include full names, email addresses, phone numbers, mailing addresses, limited purchase history, and account metadata. The poster gated full dumps behind forum replies; samples were redacted in public reporting and Tradeify had not issued a matching breach notice at catalog time. BreachHistory uses the actor-cited 240,174 count labeled unverified pending company or regulator attestation.
Root cause
Unverified underground-forum post by actor macaroni claiming full customer CRM exfiltration via exposed Klaviyo API key—Tradeify had not confirmed at catalog time